6.1
Moyenne
CVE-2023-3524 The WPCode WordPress plugin before 2.0.13.1 does not escape generated URLs before outputting them in attributes, leading…
Description
The WPCode WordPress plugin before 2.0.13.1 does not escape generated URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| WPCode 2.0 | premières → < 2.0.13.1 | 2.0.13.1 |
Autres CVE de WPCode
Les 4 CVE de WPCode →
CVE-2026-101301
The WPCode WordPress plugin before 2.4.0 does not correctly verify that a request is genuinely for the login screen…
5.3
Moyenne
CVE-2023-1624
The WPCode WordPress plugin before 2.0.9 has a flawed CSRF when deleting log, and does not ensure that the file to be…
6.5
Moyenne
CVE-2023-0328
The WPCode WordPress plugin before 2.0.7 does not have adequate privilege checks in place for several AJAX actions, only…
Non notée